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This listing of claims replaces all prior versions, and 
listings of claims in the instant application: 

Listing of Claims: 

1. (Currently Amended) A method for controlling user 
access to distributed resources on a data communications 
network, the method comprising: 

receiving a resource request, said resource request 
including a rights key credential, said rights key 
credential comprising : 

at least one key to provide access to a resource 
on said data communications network; and 

a resource identifier, said resource identifier 
comprising a resource server peer group ID and a 
randomized user ID, said resource server peer group 
ID identifying a resource server peer group, said 
resource server peer group comprising at least one 
server that maintains a mapping between asaid 
randomized user ID and said at least one key , wherein 
said randomized user ID is associated with an 
identity of a user thereby protecting said identity ; 
and 

providing access to said resource using said at least 
one key. 
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2. (Currently Amended) A method for controlling user 
access to distributed resources on a data communications 
network, the method comprising: 

receiving a resource request, said resource request 
including a rights key credential, said rights key 
credential comprising : 

at least one key, each of said at least one key 
providing access to at least one resource on said 
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data communications network, each of said at least 
one resource stored on a separate secure device; and 
a resource identifier, said resource identifier 
comprising a resource server peer group ID and a 
randomized user ID, said resource server peer group 
ID identifying a resource server peer group, said 
resource server peer group comprising at least one 
server that maintains a mapping between asaid 
randomized user ID and said at least one key , wherein 
said randomized user ID is associated with an 
identity of a user thereby protecting said identity ; 
and 

providing access to said resource using said at least 
one key. 
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3. (Currently Amended) A program storage device readable 
by a machine, embodying a program of instructions executable by 
the machine to perform a method for controlling user access to 
distributed resources on a data communications network, the 
method comprising: 

receiving a resource request, said resource request 
including a rights key credential, said rights key 
credential comprising: 

at least one key to provide access to a resource 
on said data communications network; and 

a resource identifier, said resource identifier 
comprising a resource server peer group ID and a 
randomized user ID, said resource server peer group 
ID identifying a resource server peer group, said 
resource server peer group comprising at least one 
server that maintains a mapping between a said 
randomized user ID and said at least one key , wherein 
said randomized user ID is associated with an 
identity of a user thereby protecting said identity ; 
and 
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providing access to said resource using said at least 
one key. 

4. (Currently Amended) A program storage device readable 
by a machine, embodying a program of instructions executable by 
the machine to perform a method for controlling user access to 
distributed resources on a data communications network, the 
method comprising: 

receiving a resource request, said resource request 
including a rights key credential, said rights key 
credential comprising : 

at least one key, each of said at least one key 
providing access to at least one resource on said 
data communications network, each of said at least 
one resource stored on a separate secure device; and 
a resource identifier, said resource identifier 
comprising a resource server peer group ID and a 
randomized user ID, said resource server peer group 
ID identifying a resource server peer group, said 
resource server peer group comprising at least one 
server that maintains a mapping between a said 
randomized user ID and said at least one key , wherein 
said randomized user ID is associated with an 
identity of a- user thereby protecting said identity ; 
and 

providing access to said resource using said at least 
one key. 
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5. (Currently Amended) An apparatus for controlling user 
access to distributed resources on a data communications 
network, the apparatus comprising: 

means for receiving a resource request, said resource 

request including a rights key credential, said rights key 

credential comprising : 
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at least one key to provide access to a resource 
on said data communications network; and 

a resource identifier, said resource identifier 
comprising a resource server peer group ID and a 
randomized user ID, said resource server peer group 
ID identifying a resource server peer group, said 
resource server peer group comprising at least one 
server that maintains a mapping between a said 
randomized user ID and said at least one key , wherein 
said randomized user ID is associated with an 
identity of a user thereby protecting said identity ; 
and 

means for providing access to said resource using 
said at least one key. 
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6. (Currently Amended) An apparatus for controlling user 
access to distributed resources on a data communications 
network, the apparatus comprising: 

means for receiving a resource request, said resource 

request including a rights key credential, said rights key 

credential comprising: 

at least one key, each of said at least one key 
providing access to at least one resource on said 
data communications network, each of said at least 
one resource stored on a separate secure device; and 
a resource identifier, said resource identifier 
comprising a resource server peer group ID and a 
randomized user ID, said resource server peer group 
ID identifying a resource server peer group, said 
resource server peer group comprising at least one 
server that maintains a mapping between a said 
randomized user ID and said at least one key , wherein 
said randomized user ID is associated with an 
identity of a user thereby protecting said identity ; 
and 
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means for providing access to said resource using 
said at least one key. 
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